NVD

Id
62222  
Name
CVE-2006-3548  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https, or (4) ftp URI in the url parameter in services/go.php (aka the dereferrer), (5) a javascript URI in the module parameter in services/help (aka the help viewer), and (6) the name parameter in services/problem.php (aka the problem reporting screen).  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-07-12  
Modified Date
2011-03-07  
Seq
2006-3548  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322354 62222 CVE-2006-3548 20060705 Public Advisory: Horde 3.1.1, 3.0.10 Multiple Security Issues  View
322355 62222 CVE-2006-3548 http://lists.horde.org/archives/announce/2006/000287.html  View
322356 62222 CVE-2006-3548 http://lists.horde.org/archives/announce/2006/000288.html  View
322357 62222 CVE-2006-3548 http://moritz-naumann.com/adv/0011/hordemulti/0011.txt  View
322358 62222 CVE-2006-3548 1229  View
322359 62222 CVE-2006-3548 1016442  View
322360 62222 CVE-2006-3548 DSA-1406  View
322361 62222 CVE-2006-3548 SUSE-SR:2006:019  View
322362 62222 CVE-2006-3548 20060705 Public Advisory: Horde 3.1.1, 3.0.10 Multiple Security Issues  View
322363 62222 CVE-2006-3548 18845  View
322364 62222 CVE-2006-3548 ADV-2006-2694  View
322365 62222 CVE-2006-3548 horde-multiple-functions-xss(27589)  View

Related JVN